CVE-2008-5711

Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value...

Microsoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter Bypass

source: https://www.securityfocus.com/bid/32780/info Microsoft Internet Explorer is a web browser for the Microsoft Windows operating system. Internet Explorer 8 includes a cross-site-scripting filter that is designed to prevent cross-site-scripting attacks against vulnerable web applications...

CVE-2008-4837

Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; and Microsoft Works 8 allow remote attackers to execute arbitrary code...

Microsoft Office Word Document Table Property Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Word. Exploitation requires that the attacker coerce the target into opening a malicious .DOC file. The specific flaw exists when processing a malformed table property within a...

Debian Security Advisory DSA 1671-1 (iceweasel)

The remote host is missing an update to iceweasel announced via advisory DSA 1671-1. OpenVAS Vulnerability Test $Id: deb16711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1671-1 iceweasel Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

CVE-2008-5023

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Authentication flaw

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Mozilla -moz-binding property bypasses security checks on codebase principals

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...

Mozilla Firefox 3.x < 3.0.4 Multiple Vulnerabilities

Binary data 4752.prm...

Firefox 3.0.x < 3.0.4 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.4. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - 'file:' URIs are given chrome privileges when opene...

-moz-binding property bypasses security checks on codebase principals — Mozilla

Security researcher Collin Jackson reported that the -moz-binding CSS property can be used to bypass security checks which validate codebase principals. Similar to the issue reported in MFSA 2008-23, Jackson demonstrated that an attacker can replace a stylesheet in a signed JAR which uses relativ...

Buffer overflow

Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office DjVuActiveXMSOffice.dll allows remote attackers to execute arbitrary code via a long 1 ImageURL property, and possibly the 2 Mode, 3 Page, or 4 Zoom properties...

DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit

Exploit for unknown platform in category remote exploits =========================================================== DjVu ActiveX Control 3.0 ImageURL Property Overflow Exploit =========================================================== Snoop Security Research committee -- input language=JavaScri...

djvu-overflow.txt

Snoop Security Research committee -- // clac.exe var shellcode = unescape "%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" + "%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC0...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

Stack overflow

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in 1 4xem VatCtrl Class VATDecoder.dll 1.0.0.27 and 1.0.0.51, 2 D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5, 3 Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39, and possibly other products, allows remote...

CVE-2008-4771

CVE-2008-4771 describes a stack-based buffer overflow in the VATDecoder.VatCtrl.1 ActiveX control across multiple products (4xem VatCtrl Class VATDecoder.dll 1.0.0.27/1.0.0.51; D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5; Vivotek RTSP MPEG4 SP Control RtspVapgDecoderNew.dll 2.0.0.39), ...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...